Linux Kernel Kexec Handover KHO Crash Kernel Vulnerability

A vulnerability in the Linux kernel's handling of Kexec images can lead to crashes when using crash kernels. The issue arises because the Kexec Handover (KHO) metadata is improperly applied to crash kernel images, which operate in a limited reserved memory area. This misallocation can cause the crash kernel to fault during initialization by attempting to access KHO data located outside its available memory. The problem has been addressed by modifying the KHO handling function to skip Kexec logic for crash kernels, ensuring that the KHO metadata does not interfere with the crash kernel's operation.

Impact

The vulnerability can cause a kernel panic by leading the crash kernel to access an invalid memory address, disrupting the normal boot process and potentially causing data loss or corruption.

Remediation

Users can upgrade to the latest version of the Linux kernel where this vulnerability has been fixed. Instructions for upgrading the Linux kernel can be found in the official Linux documentation or through the package manager for the specific Linux distribution in use.